Manager - Vendor Governance Management (Risk)

The Manager, Vendor Governance Management (Risk) leads a team responsible for consistent, timely, and risk-based execution of the vendor governance lifecycle. The role translates policy and regulatory requirements into effective operational controls across intake, inherent risk stratification, due diligence, ongoing monitoring, renewal and reassessment, issue remediation, and closure. units.

Role Responsibilities

1\. Risk Governance and Assessment Oversight

--------------------------------------------

·       Own the day-to-day governance and delivery of vendor risk assessments, including inherent risk screening, due diligence, reassessments, renewals, material changes, and event-driven reviews.

·       Ensure assessments are risk-based, evidence-supported, complete, and aligned with applicable outsourcing and third-party risk policies, standards, procedures, and jurisdictional requirements.

·       Provide independent review and challenge on risk ratings, control gaps, residual risk, compensating controls, and proposed risk acceptance or treatment decisions.

·       Coordinate with Privacy, Information Security, Business Continuity, Compliance, Legal, Sourcing, Procurement, and business owners to obtain timely specialist input and resolve complex cases.

·       Escalate material risks, policy exceptions, overdue actions, control failures, and unresolved ownership issues through the appropriate governance channels.

2\. Corrective Action, Incident, and Emerging Risk Management

-------------------------------------------------------------

·       Lead governance of corrective action plans, including clear ownership, achievable target dates, evidence standards, aging controls, escalation thresholds, and closure validation.

·       Oversee third-party risk incidents and emerging-risk monitoring, ensuring impact assessment, stakeholder notification, root-cause analysis, remediation, and follow-through.

·       Use external risk intelligence and internal data to identify financial, cyber, operational, reputational, concentration, geographic, and business-continuity concerns that require action.

·       Ensure highest-risk and critical vendors receive appropriate monitoring intensity, contingency planning, exit considerations, and senior-management visibility.

3\. Operational Performance, Data Quality, and Reporting

--------------------------------------------------------

·       Manage team capacity, work allocation, priorities, and service levels across markets, segments, and assessment types, balancing urgency, risk, and customer impact.

·       Maintain reliable management information covering assessment volumes, turnaround time, aging, backlog, overdue corrective actions, risk distribution, ...

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore veritatis.